Backdoored images downloaded 5 million times finally removed from Docker Hub(ars technica)
Ars technica has thestory of a set of Docker images containing cryptocurrency miners thatpersisted on Docker Hub for the better part of a year - after beingdiscovered. "Neither the Docker Hub account nor the malicious images it submitted were takendown. Over the coming months, the account went on to submit 14 moremalicious images. The submissions were publicly called out two more times,once in January by security firm Sysdig and again in May by securitycompany Fortinet. Eight days after last month's report, Docker Hub finallyremoved the images."